Description
Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Netgear Nighthawk R6700 | 1.0.4.120 | — |